BFD (Brute Force) rule for Asterisk

I whipped up a BFD rule to try and defend against sip attacks. This watches for failed logins in the /var/log/asterisk/full log and then blocks them. I set the TRIG level low so you might need to change this to something you are more comfortable with.